Practical SMB Relay Attack

[@mohammadahmadi609]

Enjoyed the way you explained it 😍😍😍
step by step and easy to follow ✨✨

[@sanskytech]

Glad you liked it

[@SonuKumar-wy5bs]

i m not getting the hashes while i have also disabled the defender in AD server

[@sakibkhan-hp1mg]

i do same thing but didn't work.

[@sanskytech]

Thanks for reaching out! I understand how frustrating it can be when these setups don’t work as expected-sometimes it’s the small details that make all the difference. Here are two critical points to check that often solve the issue:
1)Exact Credential Match:
For the SMB relay attack to be successful, the domain username and hash must exactly match the local administrator account on the target machine. This match is essential; without it, the attack won’t go through, so double-checking this is key.
2)Shared Folder Connection Technique:
Another trick is to try entering the shared folder address a few times, even deliberately entering it incorrectly. This can prompt an error like 'shared folder not found,' which actually confirms if the connection is live and responsive.
For a full, step-by-step breakdown, check out the video at th-cam.com/video/7zbX-3Sfkmo/w-d-xo.html , in that video I have fully explained the attack and the critical details, And if you still have questions, feel free to drop a comment-I’m here to help make these techniques as clear as possible. Thanks again for watching, and good luck!

[@sakibkhan-hp1mg]

@@sanskytech my domain username and hash exactly same to same my local administrator account. and i turn on network discovery and diasble firewall also. but still not work.

[@sakibkhan-hp1mg]

@@sanskytech i set domain username and hash same to same as local administrator. but still not working.

[@sanskytech]

@@sakibkhan-hp1mg Is Windows defender turned off?

[@sakibkhan-hp1mg]

@@sanskytech yes.